CVE-2024-5421

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-5421
Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.
CVSS

No CVSS.

References
Link Resource
http://seclists.org/fulldisclosure/2024/Jun/4
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html
Configurations

No configuration.

History

10 Jun 2024, 18:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2024/Jun/4 -

04 Jun 2024, 16:57

Type Values Removed Values Added
Summary
  • (es) Falta la validación de entrada y la integración de comandos del sistema operativo de la entrada en utnserver Pro, utnserver ProMAX, la interfaz web INU-100 permite la inyección de comandos autenticados. Este problema afecta a utnserver Pro, utnserver ProMAX, INU-100 versión 20.1.22 y versiones anteriores.

04 Jun 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-04 08:15

Updated : 2024-06-10 18:15

NVD link : CVE-2024-5421

Mitre link : CVE-2024-5421

CVE.ORG link : CVE-2024-5421

JSON object : View

Products Affected

No product.

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')